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and status of this protocol. Distribution of this memo is unlimited. 


Copyright Notice 
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Abstract 
The Layer 2 Tunneling Protocol, Version 3, (L2TPv3) defines a 
protocol for tunneling a variety of data link protocols over IP 
networks. This document describes the specifics of how to tunnel 


High-Level Data Link Control (HDLC) frames over L2TPv3. 
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1. Introduction 


[RFC3931] defines a base protocol for Layer 2 Tunneling over IP 
networks. This document defines the specifics necessary for 
tunneling HDLC Frames over L2TPv3. Such emulated circuits are 
referred to as HDLC Pseudowires (HDLCPWs). 


Protocol specifics defined in this document for L2TPv3 HDLCPWs 


include those necessary for simple point-to-point (e.g., between two 


L2TPv3 nodes) frame encapsulation, and for simple interface up and 


interface down notifications. 


The reader is expected to be very familiar with the terminology and 


protocol constructs defined in [RFC3931]. 


1.1 Abbreviations 


HDLC High-Level Data Link Control 

HDLCPW HDLC Pseudowire 

LAC L2TP Access Concentrator (see [RFC3931]) 

LCCE L2TP Control Connection Endpoint (see [RFC3931]) 
PW Pseudowire 
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1.2. Specification of Requirements 


In this document, several words are used to signify the requirements 
of the specification. These words are often capitalized. The key 
words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", 
"SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document 
are to be interpreted as described in [RFC2119]. 


2. Control Connection Establishment 


In order to tunnel an HDLC link over IP using L2TPv3, an L2TPv3 
Control Connection MUST first be established as described in 
[RFC3931]. The L2TPv3 SCCRQ Control Message and corresponding SCCRP 
Control Message MUST include the HDLC Pseudowire Type of 0x0006 (see 
Section 7, "IANA Considerations"), in the Pseudowire Capabilities 
List as defined in 5.4.3 of [RFC3931]. This identifies the control 
connection as able to establish L2TP sessions to support HDLC 
Pseudowires (HDLCPWs). 


An LCCE MUST be able to uniquely identify itself in the SCCRO and 
SCCRP messages via a globally unique value. By default, this is 
advertised via the structured Router ID AVP [RFC3931], though the 
unstructured Hostname AVP [RFC3931] MAY be used to identify LCCEs as 
well. 


3. HDLC Link Status Notification and Session Establishment 


This section specifies how the status of an HDLC interface is 
reported between two LCCEs, and the associated L2TP session creation 
and deletion that occurs. 


3.1. L2TPv3 Session Establishment 


Associating an HDLC serial interface with a PW and its transition to 
"Ready" or "Up" results in the establishment of an L2TP session via 
the standard three-way handshake described in Section 3.4.1 of 
[RFC3931]. For purposes of this discussion, the action of locally 
associating an interface running HDLC with a PW by local 
configuration or otherwise is referred to as "provisioning" the HDLC 
interface. The transition of the interface to "ready" or "up" will 
be referred to as the interface becoming ACTIVE. The transition of 
the interface to "not-ready" or "down" will be referred to as the 
interface becoming INACTIVE. 
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An LCCE MAY initiate the session immediately upon association with an 
HDLC interface or wait until the interface becomes ACTIVE before 
attempting to establish an L2TP session. Waiting until the interface 
transitions to ACTIVE may be preferred, as it delays allocation of 
resources until absolutely necessary. 


The Pseudowire Type AVP defined in Section 5.4.4 of [RFC3931], 
Attribute Type 68, MUST be present in the ICRQ messages and MUST 
include the Pseudowire Type of 0x0006 for HDLCPWs. 


The Circuit Status AVP (see Section 3.4) MUST be present in the ICRQ 
and ICRP messages and MAY be present in the SLI message for HDLCPWs. 


Following is an example of the L2TP messages exchanged for an HDLCPW 
that is initiated after an HDLC interface is provisioned and becomes 
ACTIVE. 


LCCE (LAC) A LCCE (LAC) B 
HDLC Interface Provisioned 
HDLC Interface Provisioned 
HDLC Interface ACTIVE 


ICRQ (status = 0x03) ----> 
HDLC Interface ACTIVE 
<---- ICRP (status = 0x03) 


L2TP session established, 
OK to send data into tunnel 


L2TP session established, 
OK to send data into tunnel 


In the example above, an ICRQ is sent after the interface is 
provisioned and becomes ACTIVE. The Circuit Status AVP indicates 
that this link is ACTIVE and New (0x03). The Remote End ID AVP 
[RFC3931] MUST be present in the ICRQ in order to identify the HDLC 
link (together with the identity of the LCCE itself as defined in 
Section 2) with which to associate the L2TP session. The Remote End 
ID AVP defined in [RFC3931] is of opaque form and variable length, 
though one MUST at a minimum support use of an unstructured four- 
octet value that is known to both LCCEs (either by direct 
configuration, or some other means). The exact method of how this 
value is configured, retrieved, discovered, or otherwise determined 
at each LCCE is outside the scope of this document. 
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As with the ICRQ, the ICRP is sent only after the associated HDLC 
interface transitions to ACTIVE as well. If LCCE B had not been 
provisioned for the interface identified in the ICRQ, a CDN would 
have been immediately returned indicating that the associated link 
was not provisioned or available at this LCCE. LCCE A SHOULD then 
exhibit a periodic retry mechanism. If so, the period and maximum 
number of retries MUST be configurable. 


An Implementation MAY send an ICRQ or ICRP before an HDLC interface 
is ACTIVE, as long as the Circuit Status AVP reflects that the link 
is INACTIVE and an SLI is sent when the HDLC interface becomes ACTIVE 
(see Section 3.3). 


The ICCN is the final stage in the session establishment, confirming 
the receipt of the ICRP with acceptable parameters to allow 
bidirectional traffic. 


L2TPv3 Session Teardown 
In the event a link is removed (unprovisioned) at either LCCE, the 
associated L2TP session MUST be torn down via the CDN message defined 


in Section 3.4.3 of [RFC3931]. 


General Result Codes regarding L2TP session establishment are defined 
in [RFC3931]. Additional HDLC result codes are defined as follows: 


20 - HDLC Link was deleted permanently (no longer provisioned) 
21 - HDLC Link has been INACTIVE for an extended period of time 


L2TPv3 Session Maintenance 


HDLCPWs over L2TP make use of the Set Link Info (SLI) control message 
defined in [RFC3931] to signal HDLC link status notifications between 
PES. The SLI message is a single message that is sent over the L2TP 
control channel, signaling the interface state change. 


The SLI message MUST be sent any time there is a status change of any 
values identified in the Circuit Status AVP. The only exceptions to 
this are the initial ICRQ, ICRP, and CDN messages, which establish 
and teardown the L2TP session itself. The SLI message may be sent 
from either PE at any time after the first ICRO is sent (and perhaps 
before an ICRP is received, requiring the peer to perform a reverse 
Session ID lookup). 


All sessions established by a given control connection utilize the 
L2TP Hello facility defined in Section 4.4 of [RFC3931] for session 
keepalive. This gives all sessions basic dead peer and path 
detection between PEs. 
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3.4. Use of Circuit Status AVP for HDLC 


HDLC reports Circuit Status with the Circuit Status AVP defined in 
[RFC3931], Attribute Type 71. For reference, this AVP is shown 
below: 


0 1 

Of. 2:3. 4-5) 6 y 8.9 OF L.-2:34 5 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
| Reserved |N|A| 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


The Value is a 16-bit mask with the two least significant bits 
defined and the remaining bits reserved for future use. Reserved 
bits MUST be set to 0 when sending, and ignored upon receipt. 


The N (New) bit SHOULD be set to one (1) if the Circuit Status 
indication is for a new HDLC circuit; to zero (0) otherwise. 


The A (Active) bit indicates whether the HDLC interface is ACTIVE (1) 
or INACTIVE (0). 


4. Encapsulation 
4.1. Data Packet Encapsulation 


HDLCPWs use the default encapsulations defined in [RFC3931] for 
demultiplexing, sequencing, and flags. The HDLCPW Type over L2TP is 
intended to operate in an "interface to interface" or "port to port" 
fashion, passing all HDLC data and control PDUs over the PW. The 
HDLC PDU is stripped of flags and trailing FCS, bit/byte unstuffing 
is performed, and the remaining data, including the address, control, 
and protocol fields, is transported over the PW. 


Since all packets are passed in a largely transparent manner over the 
HDLCPW, any protocol that has HDLC-like framing may utilize the 
HDLCPW mode, including PPP, Frame-Relay ("port to port" Frame-Relay 
transport), X.25 (LAPB), etc. In such cases, the negotiations and 
signaling of the specific protocols transported over the HDLCPW take 
place between the Remote Systems. A non-exhaustive list of examples 
and considerations of this transparent nature include: 


o When the HDLCPW transports Point-to-Point Protocol (PPP) 
traffic, PPP negotiations (Link Control Protocol, optional 
authentication, and Network Control Protocols) are performed 
between Remote Systems, and LCCEs do not participate in these 
negotiations. 
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o When the HDLCPW transports Frame-Relay traffic, PVC status 
management procedures (Local Management Interface) take place 
between Remote Systems, and LCCEs do not participate in LMI. 
Additionally, individual Frame-Relay virtual-circuits are not 
visible to the LCCEs, and the FECN, BECN, and DE bits are 
transported transparently. 


o When the HDLCPW transports X.25 (LAPB) traffic, LCCEs do not 
function as either LAPB DCE or DTE devices. 


On the other hand, exceptions include cases where direct access to 
the HDLC interface is required, or modes that operate on the flags, 
FCS, or bit/byte unstuffing that is performed before sending the HDLC 
PDU over the PW. An example of this is PPP ACCM negotiation. 


4.2. Data Packet Sequencing 


Data Packet Sequencing MAY be enabled for HDLCPWs. The sequencing 
mechanisms described in Section 4.6.1 of [RFC3931] MUST be used for 
signaling sequencing support. HDLCPWs over L2TP MUST request the 
presence of the L2TPv3 Default L2-Specific Sublayer defined in 
Section 4.6 of [RFC3931] when sequencing is enabled, and MAY request 
its presence at all times. 


4.3. MTU Considerations 


With L2TPv3 as the tunneling protocol, the packet resulting from the 
encapsulation is N bytes longer than the HDLC frame without the flags 
or FCS. The value of N depends on the following fields: 


L2TP Session Header: 
Flags, Ver, Res 4 octets (L2TPv3 over UDP only) 
Session ID 4 octets 
Cookie Size 0, 4, or 8 octets 
L2-Specific Sublayer 0 or 4 octets (i.e., using sequencing) 


Hence the range for N in octets is: 


N = 4-16, L2TPv3 data messages are over IP; 
N = 16-28, L2TPv3 data messages are over UDP; 
(N does not include the IP header.) 


The MTU and fragmentation implications resulting from this are 
discussed in Section 4.1.4 of [RFC3931]. 
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5. Applicability Statement 


HDLC Pseudowires support a "port to port" or "interface to interface" 
deployment model operating in a point-to-point fashion. In addition 
to the transport of HDLC frames, a natural application of HDLCPWs 
allows for the transport of any protocol using an HDLC-like framing. 


The HDLCPW emulation over a packet-switched network (PSN) has the 
following characteristics in relationship to the native service: 


o HDLC data and control fields are transported transparently (see 
Section 4.1). The specific negotiations and signaling of the 
protocol being transported are performed between Remote Systems 
transparently, and the LCCE does not participate in them. 


o The trailing FCS (Frame Check Sequence) containing a CRC (Cyclic 
Redundancy Check) is stripped at the ingress LCCE and not 
transported over HDLCPWs. It is therefore regenerated at the 
egress LCCE (see Section 4.1). This means that the FCS may not 
accurately reflect errors on the end-to-end HDLC link. Errors 
or corruption introduced in the HDLCPW payload during 
encapsulation or transit across the packet-switched network may 
not be detected. This lack of integrity-check transparency may 
not be of concern if it is known that the inner payloads or 
upper protocols transported perform their own error and 
integrity checking. To allow for payload integrity-checking 
transparency on HDLCPWs using L2TP over IP or L2TP over UDP/IP, 
the L2TPv3 session can utilize IPSec as specified in Section 
4.1.3 of [RFC3931]. 


o HDLC link status notification is provided using the Circuit 
Status AVP in the SLI message (see Section 3.4). 


o The length of the resulting L2TPv3 packet is longer than the 
encapsulated HDLC frame without flags and FCS (see Section 4.3), 
with resulting MTU and fragmentation implications discussed in 
Section 4.1.4 of [RFC3931]. 


o The packet-switched network may reorder, duplicate, or silently 
drop packets. Sequencing may be enabled in the HDLCPW for some 
or all packets to detect lost, duplicate, or out-of-order 
packets on a per-session basis (see Section 4.2). 


o The faithfulness of an HDLCPW may be increased by leveraging 
Quality of Service features of the LCCEs and the underlying PSN. 
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6. Security Considerations 


HDLC over L2TPv3 is subject to the security considerations defined in 


[RFC3931]. Beyond the considerations when carrying other data link 
types, there are no additional considerations specific to carrying 
HDLC. 


7. IANA Considerations 
7.1. Pseudowire Type 


The signaling mechanisms defined in this document rely upon the 
allocation of an HDLC Pseudowire Type (see Pseudowire Capabilities 
List as defined in 5.4.3 of [RFC3931] and L2TPv3 Pseudowire Types in 
10.6 of [RFC3931]) by the IANA (number space created as part of 
publication of [RFC3931]). The HDLC Pseudowire Type is defined in 
Section 2 of this specification: 


L2TPv3 Pseudowire Types 


0x0006 - HDLC Pseudowire Type 
7.2. Result Code AVP Values 


This number space is managed by IANA as described in section 2.3 of 
[BCP0068]. Two new L2TP Result Codes for the CDN message appear in 
Section 3.2. The following is a summary: 


Result Code AVP (Attribute Type 1) Values 


20 - HDLC Link was deleted permanently (no longer provisioned) 
21 - HDLC Link has been INACTIVE for an extended period of time 
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